{"id":363,"date":"2022-09-08T11:30:00","date_gmt":"2026-09-12T03:47:07","guid":{"rendered":"https:\/\/gosectv.epeakstudio.com\/videos\/from-zero-to-full-domain-admin-the-real-world-story-of-a-ransomware-attack\/"},"modified":"2026-09-16T13:46:40","modified_gmt":"2026-09-16T13:46:40","slug":"from-zero-to-full-domain-admin-the-real-world-story-of-a-ransomware-attack","status":"publish","type":"video","link":"https:\/\/gosec.tv\/fr\/videos\/from-zero-to-full-domain-admin-the-real-world-story-of-a-ransomware-attack\/","title":{"rendered":"From Zero to Full Domain Admin: The Real-World Story of a Ransomware Attack"},"content":{"rendered":"<p>Joseph Carson replays a real CryLock ransomware case from response to a live attacker demo, from bought access and cracked hashes to domain admin and defences.<\/p>\n \t\t<div class=\"woocommerce\">\n\t\t\t<div class=\"woocommerce-info wc-memberships-restriction-message wc-memberships-message wc-memberships-content-restricted-message\">\n\t\t\t\tTo access this content, you must purchase <span class=\"wc-memberships-products-grant-access\"><a href=\"https:\/\/gosec.tv\/fr\/produit\/gosec-tv-individual\/\">GoSec.TV membership \u2013 Individual<\/a> or <a href=\"https:\/\/gosec.tv\/fr\/produit\/gosec-tv-team\/\">GoSec.TV membership \u2013 Team<\/a><\/span>.\t\t    <\/div>\n\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Joseph Carson replays a real CryLock ransomware case from response to a live attacker demo, from bought access and cracked hashes to domain admin and defences.<\/p>\n<div class=\"woocommerce\">\n<div class=\"woocommerce-info wc-memberships-restriction-message wc-memberships-message wc-memberships-content-restricted-message\">\n\t\t\t\tTo access this content, you must purchase <span class=\"wc-memberships-products-grant-access\"><a href=\"https:\/\/gosec.tv\/fr\/produit\/gosec-tv-individual\/\">GoSec.TV membership \u2013 Individual<\/a> or <a href=\"https:\/\/gosec.tv\/fr\/produit\/gosec-tv-team\/\">GoSec.TV membership \u2013 Team<\/a><\/span>.\t\t    <\/div>\n<\/p><\/div>\n","protected":false},"featured_media":0,"template":"","video_vendor":[346],"video_tag":[247,179,174,176,227,222,172,209,180],"video_theme":[121,145,128,136,123],"sponsor":[48],"session_type":[21],"video_language":[20],"edition":[24],"class_list":["post-363","video","type-video","status-publish","hentry","video_vendor-delinea","video_tag-windows-and-active-directory","video_tag-credential-stuffing","video_tag-dark-web","video_tag-lateral-movement","video_tag-least-privilege","video_tag-pam","video_tag-ransomware","video_tag-red-team","video_tag-shadow-it","video_theme-identity-and-access","video_theme-incident-response-and-forensics","video_theme-offensive-security","video_theme-privileged-access-management","video_theme-security-operations","sponsor-delinea","session_type-conference","video_language-en","edition-gosec-2022","membership-content","access-restricted"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v28.4 (Yoast SEO v28.5) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>From Zero to Full Domain Admin: The Real-World Story of a Ransomware Attack &#8211; GoSec.TV<\/title>\n<meta name=\"description\" content=\"Joseph Carson replays a real CryLock ransomware case from response to a live attacker demo, from bought access and cracked hashes to domain admin and defences.\" \/>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"From Zero to Full Domain Admin: The Real-World Story of a Ransomware Attack\" \/>\n<meta property=\"og:description\" content=\"Joseph Carson replays a real CryLock ransomware case from response to a live attacker demo, from bought access and cracked hashes to domain admin and defences.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/gosec.tv\/videos\/from-zero-to-full-domain-admin-the-real-world-story-of-a-ransomware-attack\/\" \/>\n<meta property=\"og:site_name\" content=\"GoSec.TV\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-16T13:46:40+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/gosec.tv\\\/videos\\\/from-zero-to-full-domain-admin-the-real-world-story-of-a-ransomware-attack\\\/\",\"url\":\"https:\\\/\\\/gosec.tv\\\/videos\\\/from-zero-to-full-domain-admin-the-real-world-story-of-a-ransomware-attack\\\/\",\"name\":\"From Zero to Full Domain Admin: The Real-World Story of a Ransomware Attack &#8211; GoSec.TV\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/gosec.tv\\\/#website\"},\"datePublished\":\"2026-09-12T03:47:07+00:00\",\"dateModified\":\"2026-09-16T13:46:40+00:00\",\"description\":\"Joseph Carson replays a real CryLock ransomware case from response to a live attacker demo, from bought access and cracked hashes to domain admin and defences.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/gosec.tv\\\/videos\\\/from-zero-to-full-domain-admin-the-real-world-story-of-a-ransomware-attack\\\/#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/gosec.tv\\\/videos\\\/from-zero-to-full-domain-admin-the-real-world-story-of-a-ransomware-attack\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/gosec.tv\\\/videos\\\/from-zero-to-full-domain-admin-the-real-world-story-of-a-ransomware-attack\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/gosec.tv\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Videos\",\"item\":\"https:\\\/\\\/gosec.tv\\\/videos\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"From Zero to Full Domain Admin: The Real-World Story of a Ransomware Attack\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/gosec.tv\\\/#website\",\"url\":\"https:\\\/\\\/gosec.tv\\\/\",\"name\":\"GoSec.TV\",\"description\":\"Security knowledge, all year long.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/gosec.tv\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fr-FR\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"From Zero to Full Domain Admin: The Real-World Story of a Ransomware Attack &#8211; GoSec.TV","description":"Joseph Carson replays a real CryLock ransomware case from response to a live attacker demo, from bought access and cracked hashes to domain admin and defences.","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"fr_FR","og_type":"article","og_title":"From Zero to Full Domain Admin: The Real-World Story of a Ransomware Attack","og_description":"Joseph Carson replays a real CryLock ransomware case from response to a live attacker demo, from bought access and cracked hashes to domain admin and defences.","og_url":"https:\/\/gosec.tv\/videos\/from-zero-to-full-domain-admin-the-real-world-story-of-a-ransomware-attack\/","og_site_name":"GoSec.TV","article_modified_time":"2026-09-16T13:46:40+00:00","twitter_card":"summary_large_image","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/gosec.tv\/videos\/from-zero-to-full-domain-admin-the-real-world-story-of-a-ransomware-attack\/","url":"https:\/\/gosec.tv\/videos\/from-zero-to-full-domain-admin-the-real-world-story-of-a-ransomware-attack\/","name":"From Zero to Full Domain Admin: The Real-World Story of a Ransomware Attack &#8211; GoSec.TV","isPartOf":{"@id":"https:\/\/gosec.tv\/#website"},"datePublished":"2026-09-12T03:47:07+00:00","dateModified":"2026-09-16T13:46:40+00:00","description":"Joseph Carson replays a real CryLock ransomware case from response to a live attacker demo, from bought access and cracked hashes to domain admin and defences.","breadcrumb":{"@id":"https:\/\/gosec.tv\/videos\/from-zero-to-full-domain-admin-the-real-world-story-of-a-ransomware-attack\/#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/gosec.tv\/videos\/from-zero-to-full-domain-admin-the-real-world-story-of-a-ransomware-attack\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/gosec.tv\/videos\/from-zero-to-full-domain-admin-the-real-world-story-of-a-ransomware-attack\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/gosec.tv\/"},{"@type":"ListItem","position":2,"name":"Videos","item":"https:\/\/gosec.tv\/videos\/"},{"@type":"ListItem","position":3,"name":"From Zero to Full Domain Admin: The Real-World Story of a Ransomware Attack"}]},{"@type":"WebSite","@id":"https:\/\/gosec.tv\/#website","url":"https:\/\/gosec.tv\/","name":"GoSec.TV","description":"Security knowledge, all year long.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/gosec.tv\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fr-FR"}]}},"_links":{"self":[{"href":"https:\/\/gosec.tv\/fr\/wp-json\/wp\/v2\/video\/363","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/gosec.tv\/fr\/wp-json\/wp\/v2\/video"}],"about":[{"href":"https:\/\/gosec.tv\/fr\/wp-json\/wp\/v2\/types\/video"}],"version-history":[{"count":2,"href":"https:\/\/gosec.tv\/fr\/wp-json\/wp\/v2\/video\/363\/revisions"}],"predecessor-version":[{"id":1302,"href":"https:\/\/gosec.tv\/fr\/wp-json\/wp\/v2\/video\/363\/revisions\/1302"}],"wp:attachment":[{"href":"https:\/\/gosec.tv\/fr\/wp-json\/wp\/v2\/media?parent=363"}],"wp:term":[{"taxonomy":"video_vendor","embeddable":true,"href":"https:\/\/gosec.tv\/fr\/wp-json\/wp\/v2\/video_vendor?post=363"},{"taxonomy":"video_tag","embeddable":true,"href":"https:\/\/gosec.tv\/fr\/wp-json\/wp\/v2\/video_tag?post=363"},{"taxonomy":"video_theme","embeddable":true,"href":"https:\/\/gosec.tv\/fr\/wp-json\/wp\/v2\/video_theme?post=363"},{"taxonomy":"sponsor","embeddable":true,"href":"https:\/\/gosec.tv\/fr\/wp-json\/wp\/v2\/sponsor?post=363"},{"taxonomy":"session_type","embeddable":true,"href":"https:\/\/gosec.tv\/fr\/wp-json\/wp\/v2\/session_type?post=363"},{"taxonomy":"video_language","embeddable":true,"href":"https:\/\/gosec.tv\/fr\/wp-json\/wp\/v2\/video_language?post=363"},{"taxonomy":"edition","embeddable":true,"href":"https:\/\/gosec.tv\/fr\/wp-json\/wp\/v2\/edition?post=363"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}